last executing test programs: 4.075835776s ago: executing program 4 (id=1525): syz_emit_ethernet(0x98f, &(0x7f0000000800)={@random="ff2000", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x959, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805df3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f306001a9f51a948b5b303f4f02500"/87}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xaf, "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"}]}}}}}}, 0x0) 3.950552611s ago: executing program 4 (id=1528): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000f0000000000000002900000004000000041a00000000000007080000000100099f00fe64f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea9890740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e04010005020bf4c910fc020000000000000000000000000000000100000000000000140000000000000029000000340000000000000000000000a00100000000000029000000360000005e30000000000000ff3450d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42000100000100010800000000000000000738000000030c00ff0f020000000000000066090000000000000700000000000000f7ffffffffffffff010000000000000001000000000000000502000108e2c8a110995d439fbfac9716ab9c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81071800000003040307000000000000000000008000000000000001000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000040000000078000000000000002900000039000000000c020000000000ff020000000000000000000000000001fc020000000000000000000000000000fc01000000000000000000000000000100000000000000000000ffffac1414aafc000000000000000000000000000001ff010000000000000000000000000001380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x3c0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x8001, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc010000000000000000000000000000c20400000001c20400000003"], 0x38}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.480054324s ago: executing program 4 (id=1532): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 2.808607513s ago: executing program 0 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 2.660620931s ago: executing program 0 (id=1552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x18, 0x800, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x20008000) 2.572911094s ago: executing program 1 (id=1553): syz_usb_connect(0x0, 0x48, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2.318633941s ago: executing program 4 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x94bb8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f00000002c0)={{}, {r3, r4/1000+60000}}, &(0x7f0000000300)) 1.818697812s ago: executing program 1 (id=1558): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0xffffffff, 0x7], [0x9, 0x1, 0xb069, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x9, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x400005, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) 1.54477186s ago: executing program 1 (id=1559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.119398125s ago: executing program 2 (id=1561): r0 = add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="f0", 0x1, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 972.124332ms ago: executing program 2 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 971.909482ms ago: executing program 0 (id=1563): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, 0x0]) io_destroy(r1) 893.867985ms ago: executing program 2 (id=1564): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 884.574216ms ago: executing program 3 (id=1565): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 804.429244ms ago: executing program 4 (id=1566): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 791.272317ms ago: executing program 3 (id=1567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 732.45626ms ago: executing program 0 (id=1568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1bb183ac97583e04dcc4c913a3609c9c75", 0x11}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 668.221784ms ago: executing program 2 (id=1569): syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"], 0x0) 642.282904ms ago: executing program 1 (id=1570): syz_emit_ethernet(0xa25, &(0x7f0000000800)={@random="ff2000", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x9ef, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805df3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f306001a9f51a948b5b303f4f02500"/87}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc2, "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"}]}}}}}}, 0x0) 597.242628ms ago: executing program 3 (id=1571): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x137f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x2fe}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 567.881921ms ago: executing program 2 (id=1572): r0 = add_key(&(0x7f0000000300)='user\x00', 0x0, &(0x7f0000000380)="f0", 0x1, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 474.321016ms ago: executing program 1 (id=1573): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fb}, {0xb, 0x4}, {0x6, 0x1}, {0x9, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x7}, {0x3d0, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x38195d56314e40cb}}) 340.520577ms ago: executing program 2 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 306.78494ms ago: executing program 0 (id=1575): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) 262.688225ms ago: executing program 3 (id=1576): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(r0, 0x0, 0x2, 0x0) 208.915081ms ago: executing program 1 (id=1577): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) 68.855772ms ago: executing program 0 (id=1578): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_destroy(r2) 0s ago: executing program 3 (id=1579): r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000580)='2', 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6963] loop2: partition table beyond EOD, truncated [ 130.584015][ T6963] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 131.271504][ T5896] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 131.278476][ T6087] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 131.543719][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 131.567077][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.627437][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.675476][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.701595][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 131.745130][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 131.764624][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.795367][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.819121][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.851845][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 131.874692][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 131.883443][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.905508][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.929009][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.092657][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.141056][ T6087] usb 4-1: string descriptor 0 read error: -22 [ 132.159574][ T6087] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 132.299031][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.443738][ T6087] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.591824][ T6971] loop7: detected capacity change from 0 to 7 [ 132.600486][ T7018] loop5: detected capacity change from 0 to 7 [ 132.621942][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.631892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.644889][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.654728][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.774637][ T7018] Dev loop5: unable to read RDB block 7 [ 132.787186][ T7018] loop5: AHDI p1 p2 p3 [ 132.800325][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802648][ T6983] loop7: detected capacity change from 7 to 0 [ 132.808307][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.814635][ T7018] loop5: partition table partially beyond EOD, truncated [ 132.828187][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.828533][ T7018] loop5: p1 start 1601398130 is beyond EOD, [ 132.837868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.838038][ T6405] ldm_validate_partition_table(): Disk read failed. [ 132.838067][ T6405] Dev loop7: unable to read RDB block 0 [ 132.838096][ T6405] loop7: unable to read partition table [ 132.838328][ T6405] loop7: partition table beyond EOD, truncated [ 132.914283][ T7018] truncated [ 132.930152][ T7018] loop5: p2 start 1702059890 is beyond EOD, truncated [ 132.948081][ T5896] usb 4-1: USB disconnect, device number 8 [ 133.323140][ T7029] netlink: 'syz.4.281': attribute type 8 has an invalid length. [ 133.754793][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 134.100870][ T7068] loop5: detected capacity change from 0 to 7 [ 134.109931][ T7070] [U] M٭Q& K4 [ 134.135659][ T7070] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 134.140150][ T7068] Dev loop5: unable to read RDB block 7 [ 134.185707][ T7070] [U] O4 [ 134.185809][ T7068] loop5: AHDI p1 p2 p3 [ 134.197112][ T7068] loop5: partition table partially beyond EOD, truncated [ 134.204952][ T7070] [U] UB+ '~GIރRQ^,(-|ڟ-<6&H.Z9/RJΩˈ+)֭KΦ.NHA#LW#RF7P٪MAX]LN"KM +,GSBHJX̧CQ [ 134.219426][ T7068] loop5: p1 start 1601398130 is beyond EOD, truncated [ 134.261119][ T7068] loop5: p2 start 1702059890 is beyond EOD, truncated [ 134.575713][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.726875][ T7097] netlink: 'syz.1.302': attribute type 8 has an invalid length. [ 134.735372][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 134.743649][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.755939][ T5896] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.765614][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.780935][ T5896] usb 5-1: config 0 descriptor?? [ 136.308462][ T7117] netlink: 64 bytes leftover after parsing attributes in process `syz.1.308'. [ 136.354390][ T7121] binder: 7119:7121 unknown command 0 [ 136.359902][ T7121] binder: 7119:7121 ioctl c0306201 200000000080 returned -22 [ 136.382524][ T7121] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.394580][ T7121] tipc: Enabled bearer , priority 10 [ 136.582152][ T7127] loop2: detected capacity change from 0 to 7 [ 136.592424][ T6405] Dev loop2: unable to read RDB block 7 [ 136.608371][ T6405] loop2: unable to read partition table [ 136.614282][ T6405] loop2: partition table beyond EOD, truncated [ 136.643221][ T7127] Dev loop2: unable to read RDB block 7 [ 136.666066][ T7127] loop2: unable to read partition table [ 136.675939][ T7127] loop2: partition table beyond EOD, truncated [ 136.695392][ T7127] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 136.732238][ T5199] Dev loop2: unable to read RDB block 7 [ 136.739982][ T5199] loop2: unable to read partition table [ 136.746652][ T5199] loop2: partition table beyond EOD, truncated [ 137.063495][ T7134] FAULT_INJECTION: forcing a failure. [ 137.063495][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 137.079380][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(full) [ 137.079409][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.079421][ T7134] Call Trace: [ 137.079430][ T7134] [ 137.079439][ T7134] dump_stack_lvl+0xe8/0x150 [ 137.079478][ T7134] should_fail_ex+0x414/0x560 [ 137.079513][ T7134] should_failslab+0xa8/0x100 [ 137.079538][ T7134] __kmalloc_noprof+0xdf/0x800 [ 137.079557][ T7134] ? rcu_is_watching+0x15/0xb0 [ 137.079578][ T7134] ? security_sk_alloc+0x52/0x390 [ 137.079612][ T7134] security_sk_alloc+0x52/0x390 [ 137.079642][ T7134] sk_prot_alloc+0x101/0x220 [ 137.079669][ T7134] sk_alloc+0x3a/0x390 [ 137.079695][ T7134] inet6_create+0x7f0/0x1260 [ 137.079713][ T7134] ? inet6_create+0x83/0x1260 [ 137.079739][ T7134] __sock_create+0x4b3/0x9d0 [ 137.079778][ T7134] udp_sock_create6+0xcb/0x690 [ 137.079810][ T7134] ? __pfx_udp_sock_create6+0x10/0x10 [ 137.079843][ T7134] ? rxrpc_lookup_local+0xc1a/0x1410 [ 137.079867][ T7134] rxrpc_lookup_local+0xc92/0x1410 [ 137.079903][ T7134] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 137.079943][ T7134] ? __local_bh_enable_ip+0xd0/0x130 [ 137.079969][ T7134] rxrpc_sendmsg+0x399/0x710 [ 137.080002][ T7134] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 137.080031][ T7134] __sock_sendmsg+0x21c/0x270 [ 137.080063][ T7134] ____sys_sendmsg+0x505/0x820 [ 137.080092][ T7134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.080126][ T7134] ? import_iovec+0x74/0xa0 [ 137.080153][ T7134] ___sys_sendmsg+0x21f/0x2a0 [ 137.080179][ T7134] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.080241][ T7134] ? __fget_files+0x2a/0x420 [ 137.080264][ T7134] ? __fget_files+0x3a0/0x420 [ 137.080300][ T7134] __x64_sys_sendmsg+0x19b/0x260 [ 137.080326][ T7134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.080361][ T7134] ? __pfx_ksys_write+0x10/0x10 [ 137.080393][ T7134] do_syscall_64+0xec/0xf80 [ 137.080413][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.080432][ T7134] ? trace_irq_disable+0x37/0x100 [ 137.080458][ T7134] ? clear_bhb_loop+0x60/0xb0 [ 137.080481][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.080501][ T7134] RIP: 0033:0x7f1eeb98f749 [ 137.080523][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.080539][ T7134] RSP: 002b:00007f1eec7ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.080561][ T7134] RAX: ffffffffffffffda RBX: 00007f1eebbe5fa0 RCX: 00007f1eeb98f749 [ 137.080576][ T7134] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000003 [ 137.080588][ T7134] RBP: 00007f1eec7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 137.080601][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.080612][ T7134] R13: 00007f1eebbe6038 R14: 00007f1eebbe5fa0 R15: 00007f1eebd0fa28 [ 137.080644][ T7134] [ 137.576130][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 137.694223][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 137.716249][ T5896] usb 5-1: USB disconnect, device number 16 [ 137.829772][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.867422][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 138.039535][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 138.074984][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.085437][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 138.094540][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.104520][ T9] usb 3-1: config 0 descriptor?? [ 138.328875][ T9] hid_parser_main: 91 callbacks suppressed [ 138.328891][ T9] wacom 0003:056A:0304.0003: unknown main item tag 0x0 [ 138.352089][ T9] wacom 0003:056A:0304.0003: unknown main item tag 0x0 [ 138.383749][ T9] wacom 0003:056A:0304.0003: hidraw0: USB HID v0.00 Device [HID 056a:0304] on usb-dummy_hcd.2-1/input0 [ 138.601304][ T5915] usb 3-1: USB disconnect, device number 13 [ 138.766866][ T7159] netlink: 'syz.0.325': attribute type 8 has an invalid length. [ 139.045321][ T5915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.202929][ T7170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.328'. [ 139.217310][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.245609][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.256371][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.273156][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.323485][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.356761][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.366109][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.374189][ T5915] usb 4-1: Product: syz [ 139.378684][ T5915] usb 4-1: Manufacturer: syz [ 139.399320][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 139.409425][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 139.424564][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 139.431409][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 139.469257][ T7178] syzkaller1: entered promiscuous mode [ 139.477668][ T7178] syzkaller1: entered allmulticast mode [ 139.585390][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.650872][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.335'. [ 139.661288][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'. [ 139.755438][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 139.762718][ T5915] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 139.771295][ T5915] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.779615][ T5915] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.788887][ T5915] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.798230][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.807304][ T5915] usb 2-1: config 0 has no interface number 0 [ 139.813639][ T5915] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 139.824801][ T5915] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.834693][ T5915] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.846419][ T5915] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.860234][ T5915] usb 2-1: config 0 interface 125 has no altsetting 0 [ 139.867255][ T5915] usb 2-1: config 0 interface 125 has no altsetting 2 [ 139.877165][ T5915] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 139.886556][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.894600][ T5915] usb 2-1: Product: syz [ 139.900078][ T5915] usb 2-1: Manufacturer: syz [ 139.904704][ T5915] usb 2-1: SerialNumber: syz [ 139.911357][ T5915] usb 2-1: config 0 descriptor?? [ 139.916822][ T5882] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 139.929276][ T5915] usb 2-1: selecting invalid altsetting 2 [ 140.033012][ T7187] FAULT_INJECTION: forcing a failure. [ 140.033012][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.046289][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) [ 140.046313][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.046324][ T7187] Call Trace: [ 140.046334][ T7187] [ 140.046342][ T7187] dump_stack_lvl+0xe8/0x150 [ 140.046362][ T7187] should_fail_ex+0x414/0x560 [ 140.046390][ T7187] _copy_from_user+0x2d/0xb0 [ 140.046403][ T7187] ___sys_sendmsg+0x158/0x2a0 [ 140.046417][ T7187] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.046431][ T7187] ? kstrtouint+0x6e/0xe0 [ 140.046458][ T7187] ? __fget_files+0x2a/0x420 [ 140.046470][ T7187] ? __fget_files+0x3a0/0x420 [ 140.046487][ T7187] __sys_sendmmsg+0x227/0x430 [ 140.046501][ T7187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.046512][ T7187] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 140.046535][ T7187] ? ksys_write+0x22a/0x250 [ 140.046546][ T7187] ? __pfx_ksys_write+0x10/0x10 [ 140.046559][ T7187] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.046571][ T7187] do_syscall_64+0xec/0xf80 [ 140.046582][ T7187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.046591][ T7187] ? trace_irq_disable+0x37/0x100 [ 140.046605][ T7187] ? clear_bhb_loop+0x60/0xb0 [ 140.046616][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.046629][ T7187] RIP: 0033:0x7f5e8f78f749 [ 140.046639][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.046647][ T7187] RSP: 002b:00007f5e905c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.046659][ T7187] RAX: ffffffffffffffda RBX: 00007f5e8f9e5fa0 RCX: 00007f5e8f78f749 [ 140.046666][ T7187] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 140.046673][ T7187] RBP: 00007f5e905c6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.046679][ T7187] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 140.046685][ T7187] R13: 00007f5e8f9e6038 R14: 00007f5e8f9e5fa0 R15: 00007f5e8fb0fa28 [ 140.046700][ T7187] [ 140.266041][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 140.340876][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 140.350498][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.358874][ T5882] usb 5-1: Product: syz [ 140.363136][ T5882] usb 5-1: Manufacturer: syz [ 140.392992][ T5882] usb 5-1: SerialNumber: syz [ 140.821312][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 140.835981][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 141.286006][ T24] usb 2-1: USB disconnect, device number 13 [ 141.701128][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 141.723762][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 141.739355][ T5882] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 141.890286][ T5924] usb 4-1: USB disconnect, device number 9 [ 141.971922][ T7205] netlink: 'syz.3.343': attribute type 19 has an invalid length. [ 141.982724][ T5882] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 142.028194][ T7205] netlink: 'syz.3.343': attribute type 28 has an invalid length. [ 142.031866][ T5882] usb 5-1: USB disconnect, device number 17 [ 142.156362][ T7207] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 142.241915][ T7207] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.254779][ T6087] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.287224][ T7207] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 142.301951][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 142.314159][ T7215] FAULT_INJECTION: forcing a failure. [ 142.314159][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.351770][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(full) [ 142.351794][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.351805][ T7215] Call Trace: [ 142.351813][ T7215] [ 142.351821][ T7215] dump_stack_lvl+0xe8/0x150 [ 142.351850][ T7215] should_fail_ex+0x414/0x560 [ 142.351885][ T7215] _copy_from_user+0x2d/0xb0 [ 142.351898][ T7215] __copy_msghdr+0x3c5/0x5b0 [ 142.351914][ T7215] ___sys_sendmsg+0x1a5/0x2a0 [ 142.351927][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.351941][ T7215] ? kstrtouint+0x6e/0xe0 [ 142.351968][ T7215] ? __fget_files+0x2a/0x420 [ 142.351981][ T7215] ? __fget_files+0x3a0/0x420 [ 142.351998][ T7215] __sys_sendmmsg+0x227/0x430 [ 142.352012][ T7215] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.352023][ T7215] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 142.352047][ T7215] ? ksys_write+0x22a/0x250 [ 142.352058][ T7215] ? __pfx_ksys_write+0x10/0x10 [ 142.352070][ T7215] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.352083][ T7215] do_syscall_64+0xec/0xf80 [ 142.352094][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.352103][ T7215] ? trace_irq_disable+0x37/0x100 [ 142.352116][ T7215] ? clear_bhb_loop+0x60/0xb0 [ 142.352128][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.352138][ T7215] RIP: 0033:0x7ff3a9d8f749 [ 142.352149][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.352157][ T7215] RSP: 002b:00007ff3aace6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.352169][ T7215] RAX: ffffffffffffffda RBX: 00007ff3a9fe5fa0 RCX: 00007ff3a9d8f749 [ 142.352183][ T7215] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 142.352190][ T7215] RBP: 00007ff3aace6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.352196][ T7215] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 142.352202][ T7215] R13: 00007ff3a9fe6038 R14: 00007ff3a9fe5fa0 R15: 00007ff3aa10fa28 [ 142.352217][ T7215] [ 142.621805][ T7212] netlink: 80 bytes leftover after parsing attributes in process `syz.2.346'. [ 142.631036][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.346'. [ 142.640209][ T7212] tipc: MTU too low for tipc bearer [ 142.645901][ T6087] usb 2-1: Using ep0 maxpacket: 16 [ 142.668861][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.677344][ T6087] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 142.687528][ T6087] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 142.697324][ T6087] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.710321][ T6087] usb 2-1: config 1 interface 0 has no altsetting 0 [ 142.719212][ T6087] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.728372][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.740104][ T6087] usb 2-1: Product: syz [ 142.744391][ T6087] usb 2-1: Manufacturer: syz [ 142.749078][ T6087] usb 2-1: SerialNumber: syz [ 142.758271][ T7203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.788828][ T7203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.008060][ T7207] bond1: (slave gretap1): making interface the new active one [ 143.017960][ T7207] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.030270][ T6087] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.054886][ T6087] usb 2-1: USB disconnect, device number 14 [ 143.096384][ T7213] macvlan2: entered promiscuous mode [ 143.115389][ T7213] macvlan2: entered allmulticast mode [ 143.130774][ T7230] FAULT_INJECTION: forcing a failure. [ 143.130774][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 143.156610][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.3.351 Not tainted syzkaller #0 PREEMPT(full) [ 143.156637][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.156649][ T7230] Call Trace: [ 143.156656][ T7230] [ 143.156665][ T7230] dump_stack_lvl+0xe8/0x150 [ 143.156695][ T7230] should_fail_ex+0x414/0x560 [ 143.156729][ T7230] should_failslab+0xa8/0x100 [ 143.156755][ T7230] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 143.156785][ T7230] ? __alloc_skb+0x198/0x3a0 [ 143.156805][ T7230] ? __alloc_skb+0x1dc/0x3a0 [ 143.156822][ T7230] ? __local_bh_enable_ip+0xd0/0x130 [ 143.156843][ T7230] ? __alloc_skb+0x198/0x3a0 [ 143.156863][ T7230] __alloc_skb+0x1dc/0x3a0 [ 143.156887][ T7230] netlink_ack+0x146/0xa50 [ 143.156908][ T7230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.156927][ T7230] ? ref_tracker_free+0x63a/0x7d0 [ 143.156947][ T7230] ? __asan_memcpy+0x40/0x70 [ 143.156963][ T7230] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.156996][ T7230] netlink_rcv_skb+0x28c/0x470 [ 143.157020][ T7230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.157042][ T7230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.157076][ T7230] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.157108][ T7230] netlink_unicast+0x82f/0x9e0 [ 143.157138][ T7230] ? __pfx_netlink_unicast+0x10/0x10 [ 143.157158][ T7230] ? __alloc_skb+0x198/0x3a0 [ 143.157184][ T7230] ? netlink_sendmsg+0x642/0xb30 [ 143.157207][ T7230] ? skb_put+0x11b/0x210 [ 143.157231][ T7230] netlink_sendmsg+0x805/0xb30 [ 143.157264][ T7230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.157291][ T7230] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.157318][ T7230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.157336][ T7230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.157361][ T7230] __sock_sendmsg+0x21c/0x270 [ 143.157392][ T7230] ____sys_sendmsg+0x505/0x820 [ 143.157419][ T7230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.157451][ T7230] ? import_iovec+0x74/0xa0 [ 143.157477][ T7230] ___sys_sendmsg+0x21f/0x2a0 [ 143.157502][ T7230] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.157559][ T7230] ? __fget_files+0x2a/0x420 [ 143.157581][ T7230] ? __fget_files+0x3a0/0x420 [ 143.157614][ T7230] __x64_sys_sendmsg+0x19b/0x260 [ 143.157643][ T7230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.157675][ T7230] ? __pfx_ksys_write+0x10/0x10 [ 143.157705][ T7230] do_syscall_64+0xec/0xf80 [ 143.157725][ T7230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.157743][ T7230] ? trace_irq_disable+0x37/0x100 [ 143.157767][ T7230] ? clear_bhb_loop+0x60/0xb0 [ 143.157790][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.157809][ T7230] RIP: 0033:0x7ff3a9d8f749 [ 143.157825][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.157841][ T7230] RSP: 002b:00007ff3aace6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.157862][ T7230] RAX: ffffffffffffffda RBX: 00007ff3a9fe5fa0 RCX: 00007ff3a9d8f749 [ 143.157876][ T7230] RDX: 0000000000040404 RSI: 0000200000000080 RDI: 0000000000000003 [ 143.157889][ T7230] RBP: 00007ff3aace6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.157901][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.157912][ T7230] R13: 00007ff3a9fe6038 R14: 00007ff3a9fe5fa0 R15: 00007ff3aa10fa28 [ 143.157942][ T7230] [ 143.765309][ T892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.895307][ T892] usb 3-1: device descriptor read/64, error -71 [ 143.935607][ T6087] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.986477][ T7243] netlink: 'syz.3.355': attribute type 19 has an invalid length. [ 144.001695][ T7243] netlink: 'syz.3.355': attribute type 28 has an invalid length. [ 144.088362][ T6087] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.100189][ T6087] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.113268][ T7249] loop2: detected capacity change from 0 to 7 [ 144.122157][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.129918][ T6087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.141132][ T7249] Dev loop2: unable to read RDB block 7 [ 144.147591][ T6087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 144.159355][ T7249] loop2: unable to read partition table [ 144.165929][ T7249] loop2: partition table beyond EOD, truncated [ 144.172217][ T6087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 144.175303][ T892] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.184043][ T7249] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 144.245646][ T6087] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.255016][ T6087] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.273231][ T6087] usb 5-1: Product: syz [ 144.299353][ T6087] usb 5-1: Manufacturer: syz [ 144.345287][ T892] usb 3-1: device descriptor read/64, error -71 [ 145.436312][ T892] usb usb3-port1: attempt power cycle [ 145.447337][ T9] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 145.457580][ T6087] cdc_wdm 5-1:1.0: skipping garbage [ 145.463077][ T6087] cdc_wdm 5-1:1.0: skipping garbage [ 145.469875][ T9] usb 2-1: config 0 has no interface number 0 [ 145.480393][ T6087] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.486750][ T6087] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.498834][ T7257] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 145.509051][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 145.519212][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.527499][ T9] usb 2-1: Product: syz [ 145.622646][ T9] usb 2-1: Manufacturer: syz [ 145.627674][ T9] usb 2-1: SerialNumber: syz [ 145.640180][ T9] usb 2-1: config 0 descriptor?? [ 145.658875][ T7257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.717698][ T7256] bond1: (slave geneve2): making interface the new active one [ 145.726905][ T7256] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 145.745994][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.825461][ T892] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 145.885688][ T892] usb 3-1: device descriptor read/8, error -71 [ 145.995327][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 146.021679][ T5903] usb 1-1: config 0 has no interfaces? [ 146.029674][ T9] cdc_subset 2-1:0.114: probe with driver cdc_subset failed with error -71 [ 146.113149][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 146.129599][ T9] usb 2-1: USB disconnect, device number 15 [ 146.145357][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.153564][ T5903] usb 1-1: Manufacturer: syz [ 146.160279][ T5903] usb 1-1: config 0 descriptor?? [ 146.249612][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.293410][ T7268] loop5: detected capacity change from 0 to 7 [ 146.311535][ T7268] Dev loop5: unable to read RDB block 7 [ 146.336658][ T7268] loop5: unable to read partition table [ 146.363738][ T7268] loop5: partition table beyond EOD, truncated [ 146.388789][ T7268] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 146.720684][ T7276] netlink: 'syz.1.367': attribute type 19 has an invalid length. [ 146.771326][ T7250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.772563][ T7276] netlink: 'syz.1.367': attribute type 28 has an invalid length. [ 146.881328][ T7253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.018777][ T7285] binfmt_misc: register: failed to install interpreter file ./file1 [ 147.329056][ T7297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.373'. [ 147.336554][ T9] usb 5-1: USB disconnect, device number 18 [ 147.635899][ T892] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.842691][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.954575][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.001388][ T892] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 148.004347][ T9] usb 1-1: USB disconnect, device number 11 [ 148.010811][ T892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.067477][ T892] usb 2-1: config 0 descriptor?? [ 148.286560][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 148.297817][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 148.566313][ T7338] netlink: 'syz.0.381': attribute type 19 has an invalid length. [ 148.574445][ T7338] netlink: 'syz.0.381': attribute type 28 has an invalid length. [ 148.582712][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 148.608106][ T892] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 148.643043][ T892] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 148.823058][ T892] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 148.870850][ T7300] bond1: option arp_validate: invalid value (18446744073491447809) [ 148.921071][ T7300] bond1 (unregistering): Released all slaves [ 149.216134][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.408096][ T5910] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.432159][ T5910] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.452104][ T7361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.388'. [ 149.461525][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.472275][ T7300] cp2112 0003:10C4:EA90.0004: Unsupported transaction 0 [ 149.511537][ T7300] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 149.511835][ T7363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.389'. [ 149.538867][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.585945][ T892] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 149.602011][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.636449][ T892] usb 2-1: USB disconnect, device number 16 [ 149.648628][ T5910] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.685536][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.717981][ T5910] usb 3-1: Product: syz [ 149.734169][ T5910] usb 3-1: Manufacturer: syz [ 149.755989][ T7369] fuse: Unknown parameter '0x00000000000000070x0000000000000003' [ 149.757991][ T5910] cdc_wdm 3-1:1.0: skipping garbage [ 149.784543][ T5910] cdc_wdm 3-1:1.0: skipping garbage [ 149.797816][ T7370] fuse: Unknown parameter '0x00000000000000070x0000000000000003' [ 149.801821][ T5910] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 149.818419][ T5910] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.997172][ T7381] netlink: 'syz.3.392': attribute type 19 has an invalid length. [ 150.006294][ T7381] netlink: 'syz.3.392': attribute type 28 has an invalid length. [ 150.014244][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 150.134857][ T7388] loop2: detected capacity change from 0 to 7 [ 150.149919][ T7388] Dev loop2: unable to read RDB block 7 [ 150.163452][ T7388] loop2: unable to read partition table [ 150.173618][ T7388] loop2: partition table beyond EOD, truncated [ 150.184704][ T7388] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 150.517062][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 150.717609][ T7414] netlink: 'syz.0.404': attribute type 19 has an invalid length. [ 150.725890][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 150.795506][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 150.811526][ T7419] loop2: detected capacity change from 0 to 7 [ 150.822024][ T6405] Dev loop2: unable to read RDB block 7 [ 150.829335][ T6405] loop2: unable to read partition table [ 150.836048][ T6405] loop2: partition table beyond EOD, truncated [ 150.845143][ T7419] Dev loop2: unable to read RDB block 7 [ 150.851678][ T7419] loop2: unable to read partition table [ 150.859476][ T7419] loop2: partition table beyond EOD, truncated [ 150.880200][ T7419] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 150.957257][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 150.969067][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.985523][ T9] usb 2-1: config 0 has no interface number 0 [ 150.992919][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.005112][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.016624][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 151.026735][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.041408][ T9] usb 2-1: config 0 descriptor?? [ 151.070827][ T7423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.408'. [ 151.326732][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 151.349676][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 151.400872][ T9] usb 2-1: USB disconnect, device number 17 [ 152.023266][ T892] usb 3-1: USB disconnect, device number 18 [ 153.081335][ T7470] netlink: 972 bytes leftover after parsing attributes in process `syz.0.414'. [ 153.131356][ T7470] netlink: 144 bytes leftover after parsing attributes in process `syz.0.414'. [ 153.171142][ T7475] netlink: 'syz.3.416': attribute type 19 has an invalid length. [ 153.179099][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 153.430873][ T7481] process 'syz.4.415' launched '/dev/fd/3' with NULL argv: empty string added [ 154.385724][ T5910] IPVS: starting estimator thread 0... [ 154.857622][ T7493] IPVS: using max 36 ests per chain, 86400 per kthread [ 155.935732][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.053667][ T7511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.425'. [ 156.166561][ T6087] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 156.174392][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 156.190510][ T5889] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.206220][ T5889] usb 2-1: config 0 has no interface number 0 [ 156.222105][ T5889] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.248989][ T5889] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 156.278718][ T5889] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.299702][ T5889] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.321823][ T5889] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.335461][ T5903] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.348077][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.359277][ T6087] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.372182][ T5889] usb 2-1: config 0 descriptor?? [ 156.378764][ T6087] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.405823][ T5889] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 156.432540][ T6087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.447859][ T6087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.459011][ T6087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.492649][ T6087] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.505370][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 156.514274][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.526118][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.555012][ T6087] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.555254][ T5903] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 156.572350][ T6087] usb 5-1: Product: syz [ 156.572373][ T6087] usb 5-1: Manufacturer: syz [ 156.624981][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.652103][ T6087] cdc_wdm 5-1:1.0: skipping garbage [ 156.664154][ T6087] cdc_wdm 5-1:1.0: skipping garbage [ 156.694900][ T6087] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 156.697277][ T5903] usb 3-1: config 0 descriptor?? [ 156.710478][ T6087] cdc_wdm 5-1:1.0: Unknown control protocol [ 157.201517][ T7533] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.226334][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.249123][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.338450][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 157.355545][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.388652][ T5903] usb 3-1: USB disconnect, device number 19 [ 157.453346][ T7537] netlink: 'syz.0.428': attribute type 19 has an invalid length. [ 157.541002][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 157.647158][ T7540] loop5: detected capacity change from 0 to 7 [ 157.688918][ T7540] Dev loop5: unable to read RDB block 7 [ 157.694543][ T7540] loop5: unable to read partition table [ 157.732063][ T7540] loop5: partition table beyond EOD, truncated [ 157.763132][ T7540] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 158.310994][ T6087] usb 2-1: USB disconnect, device number 18 [ 158.311093][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 158.360449][ T7503] ldusb: No device or device unplugged -19 [ 158.360452][ T6087] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 158.381119][ T7545] FAULT_INJECTION: forcing a failure. [ 158.381119][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.396619][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.2.431 Not tainted syzkaller #0 PREEMPT(full) [ 158.396647][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.396658][ T7545] Call Trace: [ 158.396665][ T7545] [ 158.396673][ T7545] dump_stack_lvl+0xe8/0x150 [ 158.396701][ T7545] should_fail_ex+0x414/0x560 [ 158.396735][ T7545] _copy_from_user+0x2d/0xb0 [ 158.396760][ T7545] ___sys_sendmsg+0x158/0x2a0 [ 158.396784][ T7545] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.396811][ T7545] ? kstrtouint+0x6e/0xe0 [ 158.396861][ T7545] ? __fget_files+0x2a/0x420 [ 158.396883][ T7545] ? __fget_files+0x3a0/0x420 [ 158.396914][ T7545] __sys_sendmmsg+0x227/0x430 [ 158.396940][ T7545] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.396959][ T7545] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 158.397002][ T7545] ? ksys_write+0x22a/0x250 [ 158.397021][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 158.397041][ T7545] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.397064][ T7545] do_syscall_64+0xec/0xf80 [ 158.397083][ T7545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.397100][ T7545] ? trace_irq_disable+0x37/0x100 [ 158.397125][ T7545] ? clear_bhb_loop+0x60/0xb0 [ 158.397144][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.397161][ T7545] RIP: 0033:0x7f1eeb98f749 [ 158.397179][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.397195][ T7545] RSP: 002b:00007f1eec7ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.397222][ T7545] RAX: ffffffffffffffda RBX: 00007f1eebbe5fa0 RCX: 00007f1eeb98f749 [ 158.397237][ T7545] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 158.397250][ T7545] RBP: 00007f1eec7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 158.397263][ T7545] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 158.397275][ T7545] R13: 00007f1eebbe6038 R14: 00007f1eebbe5fa0 R15: 00007f1eebd0fa28 [ 158.397303][ T7545] [ 158.760786][ T7550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.432'. [ 158.914958][ T7558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.437'. [ 159.281111][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 159.389649][ T5910] usb 5-1: USB disconnect, device number 19 [ 159.479950][ T7576] netlink: 'syz.0.439': attribute type 28 has an invalid length. [ 159.547139][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 159.990135][ T7600] capability: warning: `syz.4.445' uses deprecated v2 capabilities in a way that may be insecure [ 160.453576][ T7615] netlink: 'syz.4.451': attribute type 28 has an invalid length. [ 160.464603][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 160.555510][ T7620] netlink: 68 bytes leftover after parsing attributes in process `syz.1.453'. [ 161.418228][ T7665] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 161.428163][ T7665] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 161.440793][ T7665] netlink: 268 bytes leftover after parsing attributes in process `syz.2.464'. [ 161.466646][ T7667] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.536221][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 161.536240][ T30] audit: type=1326 audit(1766824315.705:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78f749 code=0x7ffc0000 [ 161.635412][ T30] audit: type=1326 audit(1766824315.705:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78f749 code=0x7ffc0000 [ 161.706119][ T30] audit: type=1326 audit(1766824315.715:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f967e78f749 code=0x7ffc0000 [ 161.785275][ T30] audit: type=1326 audit(1766824315.715:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78f749 code=0x7ffc0000 [ 161.865581][ T30] audit: type=1326 audit(1766824315.715:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967e78f749 code=0x7ffc0000 [ 162.138344][ T7694] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 162.158283][ T7694] netlink: 'syz.1.478': attribute type 2 has an invalid length. [ 162.178678][ T7694] netlink: 268 bytes leftover after parsing attributes in process `syz.1.478'. [ 162.365814][ T7700] netlink: 256 bytes leftover after parsing attributes in process `syz.3.473'. [ 162.385958][ T7700] unsupported nlmsg_type 40 [ 162.405044][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 162.486692][ T7701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.905295][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.056705][ T5889] usb 4-1: no configurations [ 163.072601][ T5889] usb 4-1: can't read configurations, error -22 [ 163.225376][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.311700][ T7733] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 163.321308][ T7733] netlink: 'syz.2.489': attribute type 2 has an invalid length. [ 163.418275][ T5889] usb 4-1: no configurations [ 163.423365][ T5889] usb 4-1: can't read configurations, error -22 [ 163.455736][ T5889] usb usb4-port1: attempt power cycle [ 163.730976][ T7755] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 163.815458][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 163.848854][ T5889] usb 4-1: no configurations [ 163.853702][ T5889] usb 4-1: can't read configurations, error -22 [ 164.025439][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 164.057667][ T5889] usb 4-1: no configurations [ 164.062487][ T5889] usb 4-1: can't read configurations, error -22 [ 164.089293][ T5889] usb usb4-port1: unable to enumerate USB device [ 165.006572][ T7802] input: syz1 as /devices/virtual/input/input11 [ 165.685328][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 165.770533][ T7818] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 165.845470][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 165.854422][ T5910] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.887515][ T5910] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 165.901281][ T5910] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.933830][ T5910] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.998786][ T5910] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.008199][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.029833][ T5910] usb 4-1: Product: syz [ 166.034036][ T5910] usb 4-1: Manufacturer: syz [ 166.045462][ T5910] usb 4-1: SerialNumber: syz [ 166.089260][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.110989][ T5910] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input12 [ 166.186259][ T7831] __nla_validate_parse: 2 callbacks suppressed [ 166.186278][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 166.295311][ T5910] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.303618][ T5910] (id 0x00) [ 166.445308][ T5910] rc_core: IR keymap rc-imon-pad not found [ 166.585999][ T5910] Registered IR keymap rc-empty [ 166.591536][ T5910] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 166.602906][ T5910] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 166.628586][ T5910] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 166.651227][ T5910] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input13 [ 166.711606][ T5910] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized [ 166.975358][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.139747][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 167.150905][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.163239][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 167.175358][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.218599][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 167.235848][ T5889] pvrusb2: ********** [ 167.247291][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 167.269521][ T5889] pvrusb2: Important functionality might not be entirely working. [ 167.310471][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 167.349352][ T5889] pvrusb2: ********** [ 167.448079][ T2345] pvrusb2: Invalid write control endpoint [ 167.623775][ T5889] usb 1-1: USB disconnect, device number 12 [ 167.661963][ T2345] pvrusb2: Invalid write control endpoint [ 167.680863][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 167.705249][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 167.730834][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 167.759158][ T2345] pvrusb2: Device being rendered inoperable [ 167.777823][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 167.785177][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 167.818712][ T2345] pvrusb2: Attached sub-driver cx25840 [ 167.824511][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 167.865297][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 167.880029][ T7875] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 167.908653][ T7875] netlink: 'syz.2.544': attribute type 2 has an invalid length. [ 167.925477][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 168.386479][ T5889] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 168.388470][ T7893] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 168.417370][ T7878] imon:send_packet: task interrupted [ 168.423350][ T7878] imon:send_packet: packet tx failed (-512) [ 168.577722][ T7878] imon:vfd_write: send packet #5 failed [ 168.606923][ T7878] imon:send_packet: task interrupted [ 168.615333][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 168.620500][ T6087] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.630547][ T5889] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 168.642344][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.663567][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.710411][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.714321][ T7878] imon:send_packet: packet tx failed (-512) [ 168.748511][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.764303][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.782092][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.790784][ T7878] imon:vfd_write: send packet #0 failed [ 168.845358][ T7878] imon:send_packet: task interrupted [ 168.850968][ T7878] imon:send_packet: packet tx failed (-512) [ 168.867017][ T6087] usb 3-1: Using ep0 maxpacket: 32 [ 168.877714][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.895771][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.912479][ T6087] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 168.915762][ T7878] imon:vfd_write: send packet #0 failed [ 168.922545][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.943929][ T6087] usb 3-1: config 0 descriptor?? [ 168.980841][ T7878] imon:send_packet: task interrupted [ 169.005509][ T7878] imon:send_packet: packet tx failed (-512) [ 169.012100][ T7878] imon:vfd_write: send packet #0 failed [ 169.019279][ T7878] imon:send_packet: packet tx failed (-32) [ 169.027728][ T7878] imon:vfd_write: send packet #0 failed [ 169.053052][ T5889] usb 5-1: GET_CAPABILITIES returned 0 [ 169.060277][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 169.235282][ T5889] usb 4-1: USB disconnect, device number 14 [ 169.313979][ T7883] imon:display_open: could not find interface for minor 0 [ 169.354167][ T5910] usb 5-1: USB disconnect, device number 20 [ 169.402055][ T6087] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 169.499313][ T5903] hid-generic 0005:0010:0002.0006: item fetching failed at offset 0/1 [ 169.516709][ T5903] hid-generic 0005:0010:0002.0006: probe with driver hid-generic failed with error -22 [ 169.563994][ T7907] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 169.607427][ T7907] netlink: 'syz.4.556': attribute type 2 has an invalid length. [ 169.626033][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 169.682990][ T5910] usb 3-1: USB disconnect, device number 20 [ 169.976943][ T7923] vivid-000: disconnect [ 170.415129][ T7916] vivid-000: reconnect [ 170.421677][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 170.442673][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 170.647082][ T7943] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 170.664789][ T7943] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 170.686198][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'. [ 170.810194][ T7953] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 170.826019][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 170.838214][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.846328][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.862857][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.870294][ T7953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.878339][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.886185][ T7953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.902506][ T7953] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.225312][ T6087] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 171.315328][ T5910] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.388354][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.407252][ T6087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.430420][ T6087] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 171.450908][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.473816][ T6087] usb 3-1: config 0 descriptor?? [ 171.485305][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 171.492855][ T5910] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.521552][ T5910] usb 5-1: config 0 has no interface number 0 [ 171.537816][ T5910] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.575319][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.583361][ T5910] usb 5-1: Product: syz [ 171.591023][ T5910] usb 5-1: Manufacturer: syz [ 171.911542][ T6087] kye 0003:0458:501A.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 171.966256][ T6087] kye 0003:0458:501A.0007: hidraw0: USB HID v0.04 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 171.985346][ T5910] usb 5-1: SerialNumber: syz [ 171.993258][ T5910] usb 5-1: config 0 descriptor?? [ 172.008199][ T5910] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 172.017112][ T6087] kye 0003:0458:501A.0007: tablet-enabling feature report not found [ 172.017149][ T6087] kye 0003:0458:501A.0007: tablet enabling failed [ 172.108309][ T6087] usb 3-1: USB disconnect, device number 21 [ 172.220183][ T5910] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 172.249461][ T5910] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.474713][ T7975] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 172.485611][ T7975] netlink: 'syz.0.585': attribute type 2 has an invalid length. [ 172.493296][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 172.617485][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 172.642643][ T5910] usb 5-1: USB disconnect, device number 21 [ 172.675846][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.703366][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.739126][ T5910] quatech2 5-1:0.51: device disconnected [ 172.797962][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 172.825312][ T6087] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 172.845421][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.588'. [ 173.001953][ T6087] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.022088][ T6087] usb 1-1: config 0 has no interface number 0 [ 173.041723][ T6087] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 173.061496][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.070954][ T6087] usb 1-1: Product: syz [ 173.079921][ T6087] usb 1-1: Manufacturer: syz [ 173.084799][ T6087] usb 1-1: SerialNumber: syz [ 173.098285][ T6087] usb 1-1: config 0 descriptor?? [ 173.195509][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 173.312693][ T6087] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 173.335148][ T6087] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.377012][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.389262][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.437298][ T6087] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 173.445829][ T6087] usb 1-1: media controller created [ 173.451512][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.583589][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.600890][ T6087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.706726][ T6087] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 173.782856][ T6087] usb 1-1: USB disconnect, device number 13 [ 173.837615][ T9] usb 2-1: usb_control_msg returned -32 [ 173.856114][ T9] usbtmc 2-1:16.0: can't read capabilities [ 175.329599][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.343197][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.351084][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.365352][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.386606][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.402679][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.411589][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.420789][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.428863][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.438099][ T5910] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 175.467555][ T5910] hid-generic 0003:0003:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 175.580651][ T8068] fido_id[8068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.783740][ T8078] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 175.802051][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.810002][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.824387][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.832132][ T8078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.839818][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.847117][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.870181][ T8078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 175.871857][ T8080] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 176.018031][ T9] usb 2-1: USB disconnect, device number 19 [ 176.018917][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 178.345384][ T6087] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.562569][ T6087] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.577948][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.590236][ T6087] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.600008][ T6087] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.632652][ T6087] usb 2-1: Manufacturer: syz [ 178.658993][ T6087] usb 2-1: config 0 descriptor?? [ 178.766290][ T6087] rc_core: IR keymap rc-hauppauge not found [ 178.772478][ T6087] Registered IR keymap rc-empty [ 178.787918][ T6087] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 178.818652][ T6087] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 179.302353][ T6087] usb 2-1: USB disconnect, device number 20 [ 179.457365][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 179.592389][ T8194] netlink: 68 bytes leftover after parsing attributes in process `syz.2.669'. [ 180.037394][ T8203] loop7: detected capacity change from 0 to 7 [ 180.542252][ T8203] Dev loop7: unable to read RDB block 7 [ 180.553940][ T8203] loop7: unable to read partition table [ 180.561187][ T8203] loop7: partition table beyond EOD, truncated [ 180.567580][ T8203] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 180.756680][ T8225] could not allocate digest TFM handle crct10dif [ 181.144009][ T8253] netlink: 68 bytes leftover after parsing attributes in process `syz.1.687'. [ 181.405475][ T6087] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.578821][ T6087] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.600713][ T6087] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.630036][ T6087] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.639770][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.649378][ T6087] usb 1-1: Product: syz [ 181.653833][ T6087] usb 1-1: Manufacturer: syz [ 181.663309][ T6087] usb 1-1: SerialNumber: syz [ 181.682258][ T6087] usb 1-1: config 0 descriptor?? [ 181.710609][ T6087] usb 1-1: selecting invalid altsetting 0 [ 181.965732][ T6087] usb 1-1: USB disconnect, device number 14 [ 182.289161][ T8313] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 182.299027][ T8313] netlink: 'syz.3.709': attribute type 2 has an invalid length. [ 182.307455][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 182.750865][ T892] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.780218][ T8344] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 182.788441][ T8344] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 182.797406][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 182.945552][ T892] usb 5-1: Using ep0 maxpacket: 32 [ 182.956352][ T892] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=f2.b0 [ 182.973342][ T8350] netlink: 'syz.2.722': attribute type 2 has an invalid length. [ 183.408241][ T892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.468751][ T892] usb 5-1: config 0 descriptor?? [ 183.501286][ T892] usb 5-1: bad CDC descriptors [ 183.743191][ T892] usb 5-1: USB disconnect, device number 22 [ 184.230486][ T8379] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 184.240079][ T8379] netlink: 'syz.1.738': attribute type 2 has an invalid length. [ 184.277100][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 184.571418][ T8394] netlink: 'syz.4.744': attribute type 10 has an invalid length. [ 184.590486][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.598292][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.635752][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.642920][ T8394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.650488][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.657644][ T8394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.697164][ T8394] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 184.767252][ T8400] Failed to get privilege flags for destination (handle=0x2:0x0) [ 185.218060][ T5896] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 185.386157][ T5896] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 185.396185][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.540534][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.555069][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.601051][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.627216][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.645437][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.666380][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.696782][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.722112][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.734264][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.747512][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.760407][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.781969][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.785462][ T892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.798845][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.873195][ T8425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.757'. [ 185.886703][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.914496][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.936555][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.954685][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.991466][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.995663][ T892] usb 4-1: Using ep0 maxpacket: 8 [ 186.002863][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.018685][ T892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.031019][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.034610][ T892] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 186.048726][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.063167][ T5896] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.088792][ T892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.089422][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.120232][ T5896] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 186.134001][ T5896] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 186.136752][ T892] usb 4-1: config 0 descriptor?? [ 186.154218][ T5896] usb 5-1: Product: syz [ 186.164318][ T5896] usb 5-1: Manufacturer: syz [ 186.180934][ T892] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 186.183511][ T5896] usb 5-1: SerialNumber: syz [ 186.212964][ T5896] usb 5-1: config 0 descriptor?? [ 186.234387][ T5896] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 186.497890][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 186.498432][ T5845] usb 5-1: USB disconnect, device number 23 [ 186.530386][ T5845] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 186.849486][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 186.868445][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 187.080462][ T8475] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 187.088207][ T8475] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 187.184996][ T892] gspca_vc032x: reg_r err -71 [ 187.192790][ T892] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 187.215344][ T5896] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.223292][ T892] usb 4-1: USB disconnect, device number 15 [ 187.263665][ T8483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.778'. [ 187.385343][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 187.394899][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 187.405076][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.415652][ T5896] usb 2-1: Product: syz [ 187.419948][ T5896] usb 2-1: Manufacturer: syz [ 187.424674][ T5896] usb 2-1: SerialNumber: syz [ 187.432464][ T5896] usb 2-1: config 0 descriptor?? [ 187.595700][ T6087] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 187.652926][ T5896] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.765297][ T6087] usb 5-1: Using ep0 maxpacket: 8 [ 187.772313][ T6087] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.799371][ T6087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.817624][ T6087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.831493][ T6087] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.849282][ T6087] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.861357][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.079534][ T5896] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.094637][ T6087] usb 5-1: usb_control_msg returned -32 [ 188.106694][ T5896] usb 2-1: USB disconnect, device number 21 [ 188.115182][ T6087] usbtmc 5-1:16.0: can't read capabilities [ 188.301488][ T8520] trusted_key: syz.0.788 sent an empty control message without MSG_MORE. [ 188.469607][ T8528] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 188.529465][ T8533] binder: 8525:8533 ioctl 5000943a 0 returned -22 [ 189.209546][ T8555] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 189.246102][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.253420][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.835397][ T5910] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 189.999823][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.018984][ T5910] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.040328][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.066306][ T5910] usb 1-1: config 0 descriptor?? [ 190.078447][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 190.422938][ T5896] usb 5-1: USB disconnect, device number 24 [ 190.546511][ T8595] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 190.554654][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.555705][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.562569][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.583865][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 190.819989][ T5910] pwc: recv_control_msg error -71 req 04 val 1000 [ 190.855692][ T5910] pwc: recv_control_msg error -71 req 04 val 1300 [ 190.876604][ T5910] pwc: recv_control_msg error -71 req 04 val 1400 [ 190.904467][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 190.933587][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 190.958562][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 190.976238][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 190.997203][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.009146][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.046053][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.065701][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.083079][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.103724][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.147299][ T5910] pwc: Registered as video103. [ 191.165801][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 191.226079][ T5910] usb 1-1: USB disconnect, device number 16 [ 191.945798][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.967312][ T8646] batadv_slave_0: entered promiscuous mode [ 193.545386][ T6087] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 193.725334][ T6087] usb 2-1: Using ep0 maxpacket: 32 [ 193.737839][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.775420][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.795330][ T6087] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 193.807251][ T6087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.832248][ T6087] usb 2-1: config 0 descriptor?? [ 194.243678][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258435][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.265891][ T6087] usbhid 2-1:0.0: can't add hid device: -71 [ 194.285794][ T6087] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 194.316942][ T6087] usb 2-1: USB disconnect, device number 22 [ 196.326216][ T8711] Bluetooth: hci0: command 0x0406 tx timeout [ 196.327099][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 196.332298][ T8711] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345680][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.346586][ T8711] Bluetooth: hci4: command 0x0406 tx timeout [ 196.425683][ T6087] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 196.625302][ T6087] usb 5-1: Using ep0 maxpacket: 32 [ 196.633616][ T6087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.655335][ T6087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.665130][ T6087] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 196.695339][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.716514][ T6087] usb 5-1: config 0 descriptor?? [ 197.140246][ T6087] usbhid 5-1:0.0: can't add hid device: -71 [ 197.153912][ T6087] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.198793][ T6087] usb 5-1: USB disconnect, device number 25 [ 200.805686][ T5910] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 200.954956][ T8830] tipc: Enabled bearer , priority 0 [ 200.971697][ T8830] syzkaller0: entered promiscuous mode [ 200.985659][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 200.993096][ T8830] syzkaller0: entered allmulticast mode [ 201.002724][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.044475][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.064769][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 201.115983][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.138731][ T5910] usb 2-1: config 0 descriptor?? [ 201.147792][ T8835] tipc: Resetting bearer [ 201.186763][ T8829] tipc: Resetting bearer [ 201.307312][ T8829] tipc: Disabling bearer [ 201.557917][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 201.563964][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 201.599655][ T5910] usb 2-1: USB disconnect, device number 23 [ 201.779238][ T8867] batman_adv: batadv0: Adding interface: dummy0 [ 201.795697][ T8867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.874789][ T8867] batman_adv: batadv0: Interface activated: dummy0 [ 201.913778][ T8870] batadv0: mtu less than device minimum [ 201.923812][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.935875][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.947710][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.959518][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.971350][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.983375][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.994452][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.006203][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.018006][ T8870] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.537495][ T5903] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 202.697838][ T5903] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 202.725668][ T5903] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 202.752641][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.759775][ T5903] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 202.779750][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.795968][ T5910] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.811475][ T5903] usb 2-1: config 0 descriptor?? [ 202.955361][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 202.967438][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.989805][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.009994][ T5910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 203.028952][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.064663][ T5910] usb 3-1: config 0 descriptor?? [ 203.199247][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 203.225397][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 203.265501][ T5903] usb 2-1: USB disconnect, device number 24 [ 203.312423][ T5829] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 203.501215][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 203.515585][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 203.536197][ T5910] usb 3-1: USB disconnect, device number 22 [ 203.620737][ T8935] netlink: 212 bytes leftover after parsing attributes in process `syz.3.937'. [ 203.873002][ T8945] netlink: 'syz.4.942': attribute type 21 has an invalid length. [ 203.885597][ T8945] netlink: 164 bytes leftover after parsing attributes in process `syz.4.942'. [ 204.095919][ T8959] netlink: 212 bytes leftover after parsing attributes in process `syz.3.948'. [ 204.205574][ T5903] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 204.386270][ T5903] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 204.406254][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.416997][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.440359][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.458782][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.470168][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.549533][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.576090][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.603776][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.645899][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.662225][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.679979][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.712754][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.732919][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.758308][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.803185][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.831168][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.857073][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.895388][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.907290][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.930248][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.953475][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.979422][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.000916][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.037389][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.073433][ T5903] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.077152][ T9002] netlink: 212 bytes leftover after parsing attributes in process `syz.4.961'. [ 205.091638][ T5903] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 205.119955][ T5903] usb 2-1: Product: syz [ 205.134440][ T5903] usb 2-1: Manufacturer: syz [ 205.141835][ T5903] usb 2-1: SerialNumber: syz [ 205.164476][ T5903] usb 2-1: config 0 descriptor?? [ 205.188053][ T5903] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 205.357337][ T9011] tipc: Started in network mode [ 205.391185][ T9011] tipc: Node identity 080211000001, cluster identity 4711 [ 205.405393][ T5845] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.406807][ T9011] tipc: Enabled bearer , priority 0 [ 205.427017][ T9012] tipc: Resetting bearer [ 205.595906][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 205.629953][ T5845] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 205.650640][ T5845] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 205.662784][ T5845] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.674201][ T5845] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 205.692909][ T5845] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 205.703651][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.720193][ T5845] usb 1-1: Product: syz [ 205.724615][ T5845] usb 1-1: Manufacturer: syz [ 205.729814][ T5845] usb 1-1: SerialNumber: syz [ 205.746474][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 205.757183][ T5845] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input17 [ 205.944375][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 205.965261][ T5845] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 205.973751][ T5845] (id 0x00) [ 206.045861][ T5845] rc_core: IR keymap rc-imon-pad not found [ 206.053234][ T5845] Registered IR keymap rc-empty [ 206.060100][ T5845] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 206.071272][ T5845] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 206.168563][ T5845] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 206.185500][ T5845] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input18 [ 206.218046][ T5845] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:17> initialized [ 206.435328][ T6087] tipc: Node number set to 134418688 [ 206.441823][ T9036] netlink: 212 bytes leftover after parsing attributes in process `syz.3.973'. [ 206.554323][ T9043] tipc: Started in network mode [ 206.561497][ T9043] tipc: Node identity 080211000001, cluster identity 4711 [ 206.570173][ T9043] tipc: Enabled bearer , priority 0 [ 206.578922][ T9043] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 206.588311][ T9043] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 206.612118][ T9043] tipc: Resetting bearer [ 206.964335][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 207.014455][ T6087] usb 2-1: USB disconnect, device number 25 [ 207.051589][ T6087] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 207.208932][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 207.499280][ T9080] netlink: 128 bytes leftover after parsing attributes in process `syz.4.985'. [ 207.509706][ T9080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.985'. [ 207.615699][ T5913] tipc: Node number set to 134418688 [ 207.670407][ T9087] netlink: 'syz.3.988': attribute type 11 has an invalid length. [ 207.850280][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 208.863068][ T9153] input: syz0 as /devices/virtual/input/input19 [ 209.268731][ T5913] usb 1-1: USB disconnect, device number 17 [ 209.597126][ C1] net_ratelimit: 10 callbacks suppressed [ 209.597146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.554647][ T9206] __nla_validate_parse: 1 callbacks suppressed [ 210.554667][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 210.705671][ T5913] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 210.756056][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.897891][ T5913] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 210.919955][ T5896] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 210.925264][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.970365][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.975260][ T5913] usb 2-1: config 0 has no interface number 0 [ 210.999261][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.006203][ T5913] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 211.035301][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.063183][ T5913] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 211.077685][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.095338][ T5913] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 211.105324][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.144991][ T5913] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 211.146578][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.161530][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.181857][ T5913] usb 2-1: Product: syz [ 211.199616][ T5913] usb 2-1: Manufacturer: syz [ 211.204301][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.213259][ T5913] usb 2-1: SerialNumber: syz [ 211.216231][ T5913] usb 2-1: config 0 descriptor?? [ 211.236998][ T5913] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 211.285717][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.303646][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.314270][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.323540][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.328049][ T9229] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1036'. [ 211.346079][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1036'. [ 211.346492][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.381577][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.395331][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.406397][ T6087] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 211.424737][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.442757][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.452795][ T5913] usb 2-1: USB disconnect, device number 26 [ 211.462078][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.477543][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.487652][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.497546][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.509008][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.522503][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.532427][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.549709][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.558952][ T9233] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 211.561110][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.576234][ T6087] usb 1-1: Using ep0 maxpacket: 32 [ 211.584072][ T5896] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.594639][ T6087] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 211.602441][ T9233] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 211.603413][ T6087] usb 1-1: config 0 has no interface number 0 [ 211.626234][ T5896] usb 3-1: Product: syz [ 211.632735][ T6087] usb 1-1: config 0 interface 12 has no altsetting 0 [ 211.639799][ T5896] usb 3-1: Manufacturer: syz [ 211.644506][ T5896] usb 3-1: SerialNumber: syz [ 211.652602][ T6087] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 211.665266][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.674840][ T6087] usb 1-1: Product: syz [ 211.681859][ T5896] usb 3-1: config 0 descriptor?? [ 211.691727][ T6087] usb 1-1: Manufacturer: syz [ 211.701975][ T6087] usb 1-1: SerialNumber: syz [ 211.736602][ T5896] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 211.753900][ T6087] usb 1-1: config 0 descriptor?? [ 211.767672][ T6087] f81534 1-1:0.12: required endpoints missing [ 211.930758][ T6087] usb 3-1: USB disconnect, device number 23 [ 211.940951][ T6087] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 212.337060][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 212.506541][ T5910] usb 5-1: config 40 has an invalid interface number: 33 but max is 0 [ 212.514844][ T5910] usb 5-1: config 40 has no interface number 0 [ 212.527743][ T5910] usb 5-1: config 40 interface 33 has no altsetting 0 [ 212.538014][ T5910] usb 5-1: New USB device found, idVendor=04cb, idProduct=0113, bcdDevice=25.0c [ 212.548400][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.564340][ T5910] usb 5-1: Product: syz [ 212.573006][ T5910] usb 5-1: Manufacturer: syz [ 212.579776][ T5910] usb 5-1: SerialNumber: syz [ 212.676998][ T9261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1047'. [ 212.803493][ T5910] gspca_main: finepix-2.14.0 probing 04cb:0113 [ 212.843224][ T5910] usb 5-1: USB disconnect, device number 26 [ 213.395336][ T5910] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 213.419188][ T9291] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1058'. [ 213.545955][ T5910] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 213.566821][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.585317][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.605604][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.615560][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.624494][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.655297][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.663064][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.685293][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.697016][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.704787][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.725284][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.755349][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.763374][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.776205][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.787237][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.795071][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.804217][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.819609][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.828931][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.840578][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.851611][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.860166][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.870899][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.882094][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.891294][ T5910] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.905441][ T5910] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.916135][ T5910] usb 2-1: Product: syz [ 213.920543][ T5910] usb 2-1: Manufacturer: syz [ 213.925317][ T5910] usb 2-1: SerialNumber: syz [ 213.936090][ T5910] usb 2-1: config 0 descriptor?? [ 213.947872][ T5910] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.045921][ T6087] usb 1-1: USB disconnect, device number 18 [ 214.135084][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 214.168549][ T5910] usb 2-1: USB disconnect, device number 27 [ 214.192256][ T5910] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 214.267464][ T9304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.288055][ T9308] bond2: (slave batadv2): Opening slave failed [ 214.339306][ T9310] QAT: Invalid ioctl 1075883590 [ 214.347570][ T9310] QAT: Invalid ioctl 1075883590 [ 214.352885][ T9310] QAT: Invalid ioctl 1075883590 [ 214.364473][ T9310] QAT: Invalid ioctl 1075883590 [ 214.370033][ T9310] QAT: Invalid ioctl 1075883590 [ 214.375133][ T9310] QAT: Invalid ioctl 1075883590 [ 214.380260][ T9310] QAT: Invalid ioctl 1075883590 [ 214.385481][ T9310] QAT: Invalid ioctl 1075883590 [ 214.391178][ T9310] QAT: Invalid ioctl 1075883590 [ 214.397179][ T9310] QAT: Invalid ioctl 1075883590 [ 214.405496][ T6087] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 214.586473][ T6087] usb 5-1: Using ep0 maxpacket: 8 [ 214.593940][ T6087] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 214.602770][ T6087] usb 5-1: config 179 has no interface number 0 [ 214.625614][ T6087] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 214.648544][ T6087] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 214.664731][ T6087] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.736961][ T6087] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 214.793694][ T6087] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 214.839078][ T6087] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 214.885243][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.945342][ T9326] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 214.975376][ T9326] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 215.017374][ T9306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 215.282181][ T6087] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 215.459158][ T5915] usb 5-1: USB disconnect, device number 27 [ 215.459158][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.475340][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 216.138168][ T5915] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 216.306106][ T5915] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 216.330483][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.373571][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.401000][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.416648][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.426505][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.445829][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.462901][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.504139][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.525451][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.544003][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.571840][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.612653][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.632105][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.645410][ T9360] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 216.651677][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.665351][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.673542][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.686992][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.700387][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.708650][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.718849][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.733236][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.757475][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.775831][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.815535][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.838348][ T5915] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.885676][ T5915] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.903371][ T5915] usb 1-1: Product: syz [ 216.921357][ T5915] usb 1-1: Manufacturer: syz [ 216.936700][ T5915] usb 1-1: SerialNumber: syz [ 216.967651][ T5915] usb 1-1: config 0 descriptor?? [ 217.002693][ T5915] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 217.192215][ T5889] usb 1-1: USB disconnect, device number 19 [ 217.220432][ T5889] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 217.316288][ T30] audit: type=1326 audit(1766824371.505:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.1.1093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f967e78f749 code=0x0 [ 217.407559][ T9381] syzkaller0: entered promiscuous mode [ 217.413198][ T9381] syzkaller0: entered allmulticast mode [ 217.440559][ T9384] netlink: 'syz.1.1093': attribute type 10 has an invalid length. [ 217.483743][ T9384] team0: Port device dummy0 added [ 217.843503][ T9406] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 217.845380][ T5915] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 217.869197][ T9406] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.018029][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.041564][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.052726][ T5915] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 218.062857][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.078485][ T5915] usb 4-1: config 0 descriptor?? [ 218.506259][ T5915] bigben 0003:146B:0902.0009: unexpected rdesc, please submit for review [ 218.521732][ T5915] bigben 0003:146B:0902.0009: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 218.570069][ T5915] bigben 0003:146B:0902.0009: not enough fields in HID_OUTPUT_REPORT 0 [ 218.602676][ T5915] bigben 0003:146B:0902.0009: no output report found [ 218.615509][ T5889] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 218.701941][ T5915] usb 4-1: USB disconnect, device number 16 [ 218.896185][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.937230][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 218.986077][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.010857][ T5889] usb 1-1: config 0 descriptor?? [ 219.253349][ T9446] input: syz0 as /devices/virtual/input/input22 [ 219.479541][ T9459] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 219.490843][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 219.513904][ T9459] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 219.524524][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 219.536069][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 219.555352][ T5915] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.560224][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 219.576142][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 219.730715][ T5915] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 219.744741][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.762687][ T5915] usb 5-1: Product: syz [ 219.767103][ T5915] usb 5-1: Manufacturer: syz [ 219.773116][ T5915] usb 5-1: SerialNumber: syz [ 219.781981][ T5915] usb 5-1: config 0 descriptor?? [ 219.794981][ T5915] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 219.854747][ T9472] binder: 9466:9472 ioctl 400c620e 0 returned -14 [ 220.175725][ T9478] tipc: Enabled bearer , priority 0 [ 220.185453][ T9478] syzkaller0: entered promiscuous mode [ 220.191589][ T9478] syzkaller0: entered allmulticast mode [ 220.199833][ T5915] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 220.219867][ T5915] sq905c 5-1:0.0: Reading version command failed [ 220.239234][ T9478] tipc: Resetting bearer [ 220.248548][ T5915] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 220.256961][ T9477] tipc: Resetting bearer [ 220.277921][ T5915] usb 5-1: USB disconnect, device number 28 [ 220.304287][ T9477] tipc: Disabling bearer [ 220.724356][ T9500] trusted_key: encrypted_key: insufficient parameters specified [ 221.106590][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 221.112630][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 221.136760][ T5889] usb 1-1: USB disconnect, device number 20 [ 221.267194][ T5915] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 221.435754][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 221.450250][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.488578][ T5915] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 221.511144][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.528408][ T5915] usb 5-1: Product: syz [ 221.538663][ T5915] usb 5-1: Manufacturer: syz [ 221.551487][ T5915] usb 5-1: SerialNumber: syz [ 221.577189][ T5915] usb 5-1: config 0 descriptor?? [ 221.820875][ T5889] usb 5-1: USB disconnect, device number 29 [ 222.143957][ T9562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1174'. [ 222.180281][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 222.341391][ T9575] tipc: Enabling of bearer rejected, already enabled [ 222.659515][ T9591] IPv6: addrconf: prefix option has invalid lifetime [ 223.171039][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1188'. [ 223.395479][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 223.568332][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 223.579719][ T5889] usb 2-1: config 0 has no interfaces? [ 223.589878][ T5889] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 223.609427][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.628061][ T5889] usb 2-1: Product: syz [ 223.634881][ T5889] usb 2-1: Manufacturer: syz [ 223.649851][ T5889] usb 2-1: SerialNumber: syz [ 223.668121][ T5889] usb 2-1: config 0 descriptor?? [ 224.130402][ T9639] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1200'. [ 224.208428][ T9643] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 225.354377][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 226.170706][ T5896] usb 2-1: USB disconnect, device number 28 [ 226.505314][ T5915] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 226.665607][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 226.679080][ T5915] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 226.698113][ T5915] usb 3-1: config 0 has no interface number 0 [ 226.714491][ T5915] usb 3-1: config 0 interface 163 has no altsetting 0 [ 226.728489][ T5915] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 226.748725][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.765592][ T5915] usb 3-1: Product: syz [ 226.775407][ T5915] usb 3-1: Manufacturer: syz [ 226.785704][ T5915] usb 3-1: SerialNumber: syz [ 226.806927][ T5915] usb 3-1: config 0 descriptor?? [ 226.838239][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 227.056655][ T9726] warning: `syz.4.1223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.231749][ T5915] usb 3-1: USB disconnect, device number 24 [ 227.246558][ T5915] f81534a_ctrl 3-1:0.163: failed to set register 0x116: -19 [ 227.266698][ T5915] f81534a_ctrl 3-1:0.163: failed to enable ports: -19 [ 227.499748][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1238'. [ 227.969235][ T9771] kernel profiling enabled (shift: 9) [ 228.107947][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 228.361322][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 228.394694][ T3530] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.406070][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 228.421155][ T3530] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.449058][ T3530] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.484826][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 228.505779][ T3530] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.551063][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 229.976850][ T9840] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1275'. [ 230.217273][ T9844] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 230.626344][ T5910] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 230.809066][ T5910] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 230.841387][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.901097][ T5910] usb 1-1: config 0 has no interface number 0 [ 230.924111][ T5910] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 230.956469][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 230.995309][ T5910] usb 1-1: Product: syz [ 231.012997][ T5910] usb 1-1: SerialNumber: syz [ 231.032578][ T5910] usb 1-1: config 0 descriptor?? [ 231.052120][ T5910] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 231.125147][ T9871] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1286'. [ 231.200345][ T9875] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 231.220024][ T9875] netlink: 'syz.2.1288': attribute type 2 has an invalid length. [ 231.240241][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 231.315560][ T5889] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 231.479574][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.505313][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.525039][ T5889] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 231.539643][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.565929][ T5889] usb 5-1: config 0 descriptor?? [ 232.021045][ T5889] hid_parser_main: 8 callbacks suppressed [ 232.021068][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.035690][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.043193][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.050899][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.070804][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.087239][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.108622][ T5889] elecom 0003:056E:00FD.000A: unknown main item tag 0x0 [ 232.124479][ T9900] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1299'. [ 232.146196][ T5889] elecom 0003:056E:00FD.000A: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 232.221268][ T5889] usb 5-1: USB disconnect, device number 30 [ 232.309360][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.420538][ T9905] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 232.430655][ T9905] netlink: 'syz.3.1301': attribute type 2 has an invalid length. [ 232.442780][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 232.856028][ T5889] usb 1-1: USB disconnect, device number 21 [ 233.169091][ T9929] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 233.177264][ T9929] netlink: 'syz.0.1312': attribute type 2 has an invalid length. [ 233.201129][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 233.262413][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 233.283006][ T9935] syz_tun: entered allmulticast mode [ 233.308523][ T9934] syz_tun: left allmulticast mode [ 234.366732][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1336'. [ 234.465691][ T6087] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 234.502384][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 234.638970][ T6087] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 234.685523][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.702146][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.726602][ T6087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 234.761302][ T6087] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 234.785300][ T6087] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 234.795771][T10008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1347'. [ 234.813554][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 234.814917][ T6087] usb 3-1: Manufacturer: syz [ 234.860180][ T6087] usb 3-1: config 0 descriptor?? [ 234.876659][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.895556][ T5987] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.918835][ T5987] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.955790][ T5987] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.307405][ T6087] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 235.340175][ T6087] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 235.591544][ T5910] usb 3-1: USB disconnect, device number 25 [ 235.823280][T10036] fido_id[10036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 236.160220][T10046] __nla_validate_parse: 2 callbacks suppressed [ 236.160238][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1360'. [ 236.413416][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 236.455453][ T6087] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 236.625324][ T6087] usb 5-1: Using ep0 maxpacket: 16 [ 236.635130][ T6087] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.662763][ T6087] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.685541][ T6087] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.704889][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.729881][ T6087] usb 5-1: config 0 descriptor?? [ 236.869181][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'. [ 236.904442][T10079] vlan2: entered promiscuous mode [ 236.911414][T10079] dummy0: entered promiscuous mode [ 237.175581][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1380'. [ 237.208252][ T6087] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 237.610183][ T6087] usb 5-1: USB disconnect, device number 31 [ 238.136779][T10140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1399'. [ 238.856774][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 239.897305][ T6087] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 239.992725][T10235] bond0: (slave syz_tun): Releasing backup interface [ 240.020920][T10235] batman_adv: batadv0: Interface deactivated: dummy0 [ 240.028908][T10235] batman_adv: batadv0: Removing interface: dummy0 [ 240.041557][T10235] bridge_slave_0: left allmulticast mode [ 240.054326][T10235] bridge_slave_0: left promiscuous mode [ 240.060462][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.076749][ T6087] usb 5-1: Using ep0 maxpacket: 32 [ 240.090410][ T6087] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.091586][T10235] bridge_slave_1: left allmulticast mode [ 240.109113][ T6087] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.127161][T10235] bridge_slave_1: left promiscuous mode [ 240.130823][ T6087] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 240.134182][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.165358][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.183351][T10235] bond0: (slave bond_slave_0): Releasing backup interface [ 240.185377][ T5889] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 240.203167][ T6087] usb 5-1: config 0 descriptor?? [ 240.223690][T10235] bond0: (slave bond_slave_1): Releasing backup interface [ 240.241592][T10235] team0: Port device team_slave_0 removed [ 240.281808][T10235] team0: Port device team_slave_1 removed [ 240.291956][T10235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.300158][T10235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.310061][T10235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.319566][T10235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.329956][T10235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.374297][ T5889] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 240.390972][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.402895][ T5889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 240.434320][ T5889] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 240.451727][ T5889] usb 2-1: Manufacturer: syz [ 240.488519][ T5889] usb 2-1: config 0 descriptor?? [ 240.565960][ T5889] rc_core: IR keymap rc-hauppauge not found [ 240.573215][ T5889] Registered IR keymap rc-empty [ 240.593460][ T5889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 240.623089][ T5889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 240.664530][T10266] binder: BINDER_SET_CONTEXT_MGR already set [ 240.678041][T10266] binder: 10263:10266 ioctl 4018620d 200000004a80 returned -16 [ 240.704147][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 240.713734][ T5903] usb 2-1: USB disconnect, device number 29 [ 241.974348][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 242.205092][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 242.590096][T10374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1491'. [ 242.678305][ T5903] usb 5-1: USB disconnect, device number 32 [ 244.377130][ T5903] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 244.535308][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 244.555626][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.586235][ T5903] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 244.607767][ T5903] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 244.620708][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.641453][ T5903] usb 3-1: Product: syz [ 244.651583][ T5903] usb 3-1: Manufacturer: syz [ 244.665396][ T5903] usb 3-1: SerialNumber: syz [ 244.889257][ T5903] usb 3-1: Cannot retrieve CPort count: -71 [ 244.905520][ T5903] usb 3-1: Cannot retrieve CPort count: -71 [ 244.920861][ T5903] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 244.961058][ T5903] usb 3-1: USB disconnect, device number 26 [ 245.558851][T10520] input: syz1 as /devices/virtual/input/input27 [ 245.880360][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 245.938682][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 245.952655][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 245.972788][ T6387] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.992391][ T6387] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.012831][ T6387] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.012937][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 246.032836][ T6387] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.771692][T10555] input: syz0 as /devices/virtual/input/input29 [ 247.761671][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.769136][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.396103][T10577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.614825][T10577] ================================================================== [ 248.622949][T10577] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa42/0xce0 [ 248.631877][T10577] Read of size 1 at addr ffff888056043d50 by task syz.4.1566/10577 [ 248.639796][T10577] [ 248.642143][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.4.1566 Not tainted syzkaller #0 PREEMPT(full) [ 248.642177][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.642191][T10577] Call Trace: [ 248.642202][T10577] [ 248.642213][T10577] dump_stack_lvl+0xe8/0x150 [ 248.642244][T10577] print_report+0xca/0x240 [ 248.642266][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 248.642296][T10577] kasan_report+0x118/0x150 [ 248.642323][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 248.642357][T10577] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 248.642391][T10577] ieee80211_do_stop+0x1786/0x1f70 [ 248.642429][T10577] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 248.642470][T10577] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.642506][T10577] ieee80211_stop+0x1b1/0x240 [ 248.642535][T10577] ? __pfx_ieee80211_stop+0x10/0x10 [ 248.642565][T10577] __dev_close_many+0x344/0x6b0 [ 248.642589][T10577] ? __pfx___dev_close_many+0x10/0x10 [ 248.642611][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 248.642635][T10577] __dev_change_flags+0x2be/0x680 [ 248.642664][T10577] ? __pfx___dev_change_flags+0x10/0x10 [ 248.642687][T10577] ? netif_state_change+0x241/0x380 [ 248.642707][T10577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.642731][T10577] ? __pfx_netif_state_change+0x10/0x10 [ 248.642754][T10577] netif_change_flags+0x88/0x1a0 [ 248.642781][T10577] do_setlink+0xc55/0x41c0 [ 248.642807][T10577] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.642845][T10577] ? __pfx_do_setlink+0x10/0x10 [ 248.642871][T10577] ? __pfx_stack_trace_save+0x10/0x10 [ 248.642910][T10577] ? __mutex_trylock_common+0x153/0x260 [ 248.642937][T10577] ? __pfx___mutex_trylock_common+0x10/0x10 [ 248.642965][T10577] ? rcu_is_watching+0x15/0xb0 [ 248.642991][T10577] ? trace_contention_end+0x39/0x100 [ 248.643016][T10577] ? __mutex_lock+0x335/0x1350 [ 248.643044][T10577] ? rtnl_newlink+0x8ec/0x1c90 [ 248.643067][T10577] ? __pfx___mutex_lock+0x10/0x10 [ 248.643092][T10577] ? ns_capable+0x8a/0xf0 [ 248.643114][T10577] rtnl_newlink+0x14b0/0x1c90 [ 248.643142][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.643163][T10577] ? do_syscall_64+0xec/0xf80 [ 248.643189][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.643228][T10577] ? kasan_quarantine_put+0xbb/0x1f0 [ 248.643248][T10577] ? lockdep_hardirqs_on+0x7b/0x110 [ 248.643272][T10577] ? kmem_cache_free+0x197/0x620 [ 248.643292][T10577] ? nlmon_xmit+0xb0/0x100 [ 248.643323][T10577] ? __lock_acquire+0x6b6/0x2cf0 [ 248.643349][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 248.643370][T10577] ? lockdep_hardirqs_on+0x7b/0x110 [ 248.643390][T10577] ? __dev_queue_xmit+0x289/0x3140 [ 248.643417][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 248.643438][T10577] ? __dev_queue_xmit+0x289/0x3140 [ 248.643469][T10577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 248.643498][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.643520][T10577] rtnetlink_rcv_msg+0x7cf/0xb70 [ 248.643543][T10577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 248.643565][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.643586][T10577] ? ref_tracker_free+0x63a/0x7d0 [ 248.643607][T10577] ? __asan_memcpy+0x40/0x70 [ 248.643625][T10577] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.643650][T10577] netlink_rcv_skb+0x208/0x470 [ 248.643677][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.643700][T10577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.643731][T10577] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.643761][T10577] netlink_unicast+0x82f/0x9e0 [ 248.643789][T10577] ? __pfx_netlink_unicast+0x10/0x10 [ 248.643811][T10577] ? __alloc_skb+0x198/0x3a0 [ 248.643833][T10577] ? netlink_sendmsg+0x642/0xb30 [ 248.643858][T10577] ? skb_put+0x11b/0x210 [ 248.643882][T10577] netlink_sendmsg+0x805/0xb30 [ 248.643913][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.643937][T10577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.643963][T10577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.643983][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.644010][T10577] __sock_sendmsg+0x21c/0x270 [ 248.644041][T10577] ____sys_sendmsg+0x505/0x820 [ 248.644068][T10577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.644097][T10577] ? import_iovec+0x74/0xa0 [ 248.644124][T10577] ___sys_sendmsg+0x21f/0x2a0 [ 248.644150][T10577] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.644181][T10577] ? futex_wait+0x285/0x360 [ 248.644218][T10577] ? __fget_files+0x2a/0x420 [ 248.644243][T10577] ? __fget_files+0x3a0/0x420 [ 248.644272][T10577] __x64_sys_sendmsg+0x19b/0x260 [ 248.644297][T10577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.644326][T10577] ? rcu_is_watching+0x15/0xb0 [ 248.644357][T10577] do_syscall_64+0xec/0xf80 [ 248.644377][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.644397][T10577] ? trace_irq_disable+0x37/0x100 [ 248.644425][T10577] ? clear_bhb_loop+0x60/0xb0 [ 248.644447][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.644467][T10577] RIP: 0033:0x7fe3ce18f749 [ 248.644487][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.644506][T10577] RSP: 002b:00007fe3cefc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.644529][T10577] RAX: ffffffffffffffda RBX: 00007fe3ce3e5fa0 RCX: 00007fe3ce18f749 [ 248.644545][T10577] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 248.644559][T10577] RBP: 00007fe3ce213f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.644572][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.644585][T10577] R13: 00007fe3ce3e6038 R14: 00007fe3ce3e5fa0 R15: 00007fe3ce50fa28 [ 248.644610][T10577] [ 248.644617][T10577] [ 249.180281][T10577] The buggy address belongs to the physical page: [ 249.186690][T10577] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056043400 pfn:0x56040 [ 249.196783][T10577] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 249.205277][T10577] memcg:ffff888028614102 [ 249.209504][T10577] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 249.217559][T10577] page_type: f8(unknown) [ 249.221991][T10577] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 249.230570][T10577] raw: ffff888056043400 0000000000000000 00000000f8000000 ffff888028614102 [ 249.239151][T10577] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 249.247910][T10577] head: ffff888056043400 0000000000000000 00000000f8000000 ffff888028614102 [ 249.256593][T10577] head: 00fff00000000002 ffffea0001581001 00000000ffffffff 00000000ffffffff [ 249.265539][T10577] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 249.275020][T10577] page dumped because: kasan: bad access detected [ 249.281439][T10577] page_owner tracks the page as allocated [ 249.287143][T10577] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 8200, tgid 8199 (syz.4.670), ts 179865683461, free_ts 178702220467 [ 249.308796][T10577] post_alloc_hook+0x234/0x290 [ 249.313561][T10577] get_page_from_freelist+0x24e0/0x2580 [ 249.319104][T10577] __alloc_frozen_pages_noprof+0x181/0x370 [ 249.324998][T10577] alloc_pages_mpol+0x232/0x4a0 [ 249.329862][T10577] ___kmalloc_large_node+0x4e/0x150 [ 249.335060][T10577] __kmalloc_large_node_noprof+0x18/0x90 [ 249.340696][T10577] __kvmalloc_node_noprof+0x6e/0x920 [ 249.346066][T10577] alloc_netdev_mqs+0xa6/0x11b0 [ 249.350917][T10577] ieee80211_if_add+0x45c/0x1370 [ 249.355898][T10577] ieee80211_add_iface+0xb5/0x5a0 [ 249.360921][T10577] nl80211_new_interface+0x883/0x1130 [ 249.366328][T10577] genl_family_rcv_msg_doit+0x215/0x300 [ 249.371898][T10577] genl_rcv_msg+0x60e/0x790 [ 249.376412][T10577] netlink_rcv_skb+0x208/0x470 [ 249.381181][T10577] genl_rcv+0x28/0x40 [ 249.385165][T10577] netlink_unicast+0x82f/0x9e0 [ 249.389923][T10577] page last free pid 8164 tgid 8163 stack trace: [ 249.396244][T10577] __free_frozen_pages+0xbc8/0xd30 [ 249.401349][T10577] __slab_free+0x2ce/0x320 [ 249.405768][T10577] qlist_free_all+0x97/0x100 [ 249.410367][T10577] kasan_quarantine_reduce+0x148/0x160 [ 249.415826][T10577] __kasan_slab_alloc+0x22/0x80 [ 249.420690][T10577] kmem_cache_alloc_noprof+0x37d/0x710 [ 249.426169][T10577] getname_flags+0xb8/0x540 [ 249.430763][T10577] io_renameat_prep+0x1d1/0x3d0 [ 249.435611][T10577] io_submit_sqes+0xad3/0x2140 [ 249.440369][T10577] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 249.446036][T10577] do_syscall_64+0xec/0xf80 [ 249.450537][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.456422][T10577] [ 249.458735][T10577] Memory state around the buggy address: [ 249.464350][T10577] ffff888056043c00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 249.472408][T10577] ffff888056043c80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 249.480467][T10577] >ffff888056043d00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 249.488522][T10577] ^ [ 249.495198][T10577] ffff888056043d80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 249.503269][T10577] ffff888056043e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 249.511344][T10577] ================================================================== [ 249.546289][T10577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.553616][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.4.1566 Not tainted syzkaller #0 PREEMPT(full) [ 249.563363][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.573612][T10577] Call Trace: [ 249.576982][T10577] [ 249.579994][T10577] vpanic+0x1e0/0x670 [ 249.584084][T10577] panic+0xb9/0xc0 [ 249.587835][T10577] ? __pfx_panic+0x10/0x10 [ 249.592283][T10577] ? preempt_schedule_thunk+0x16/0x30 [ 249.597700][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 249.604062][T10577] ? preempt_schedule_thunk+0x16/0x30 [ 249.609464][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 249.615648][T10577] check_panic_on_warn+0x89/0xb0 [ 249.620966][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 249.627155][T10577] end_report+0x6f/0x140 [ 249.631428][T10577] kasan_report+0x129/0x150 [ 249.635942][T10577] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 249.642104][T10577] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 249.648204][T10577] ieee80211_do_stop+0x1786/0x1f70 [ 249.653383][T10577] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 249.659592][T10577] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.665418][T10577] ieee80211_stop+0x1b1/0x240 [ 249.670106][T10577] ? __pfx_ieee80211_stop+0x10/0x10 [ 249.675316][T10577] __dev_close_many+0x344/0x6b0 [ 249.680169][T10577] ? __pfx___dev_close_many+0x10/0x10 [ 249.685540][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 249.690826][T10577] __dev_change_flags+0x2be/0x680 [ 249.695863][T10577] ? __pfx___dev_change_flags+0x10/0x10 [ 249.701583][T10577] ? netif_state_change+0x241/0x380 [ 249.706873][T10577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.712863][T10577] ? __pfx_netif_state_change+0x10/0x10 [ 249.718416][T10577] netif_change_flags+0x88/0x1a0 [ 249.723377][T10577] do_setlink+0xc55/0x41c0 [ 249.727813][T10577] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.733997][T10577] ? __pfx_do_setlink+0x10/0x10 [ 249.738867][T10577] ? __pfx_stack_trace_save+0x10/0x10 [ 249.744259][T10577] ? __mutex_trylock_common+0x153/0x260 [ 249.750074][T10577] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.755982][T10577] ? rcu_is_watching+0x15/0xb0 [ 249.760766][T10577] ? trace_contention_end+0x39/0x100 [ 249.766051][T10577] ? __mutex_lock+0x335/0x1350 [ 249.770821][T10577] ? rtnl_newlink+0x8ec/0x1c90 [ 249.775595][T10577] ? __pfx___mutex_lock+0x10/0x10 [ 249.780632][T10577] ? ns_capable+0x8a/0xf0 [ 249.784966][T10577] rtnl_newlink+0x14b0/0x1c90 [ 249.789654][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.794682][T10577] ? do_syscall_64+0xec/0xf80 [ 249.799448][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.805523][T10577] ? kasan_quarantine_put+0xbb/0x1f0 [ 249.810820][T10577] ? lockdep_hardirqs_on+0x7b/0x110 [ 249.816111][T10577] ? kmem_cache_free+0x197/0x620 [ 249.821133][T10577] ? nlmon_xmit+0xb0/0x100 [ 249.825554][T10577] ? __lock_acquire+0x6b6/0x2cf0 [ 249.830681][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 249.835993][T10577] ? lockdep_hardirqs_on+0x7b/0x110 [ 249.841209][T10577] ? __dev_queue_xmit+0x289/0x3140 [ 249.846929][T10577] ? __local_bh_enable_ip+0xd0/0x130 [ 249.852212][T10577] ? __dev_queue_xmit+0x289/0x3140 [ 249.857412][T10577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 249.862648][T10577] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.867758][T10577] rtnetlink_rcv_msg+0x7cf/0xb70 [ 249.872700][T10577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 249.877924][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.883382][T10577] ? ref_tracker_free+0x63a/0x7d0 [ 249.888402][T10577] ? __asan_memcpy+0x40/0x70 [ 249.892984][T10577] ? __pfx_ref_tracker_free+0x10/0x10 [ 249.898363][T10577] netlink_rcv_skb+0x208/0x470 [ 249.903134][T10577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.908598][T10577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.913903][T10577] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.919102][T10577] netlink_unicast+0x82f/0x9e0 [ 249.923872][T10577] ? __pfx_netlink_unicast+0x10/0x10 [ 249.929152][T10577] ? __alloc_skb+0x198/0x3a0 [ 249.933738][T10577] ? netlink_sendmsg+0x642/0xb30 [ 249.938673][T10577] ? skb_put+0x11b/0x210 [ 249.942908][T10577] netlink_sendmsg+0x805/0xb30 [ 249.947697][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.952984][T10577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.957935][T10577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.963265][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.968571][T10577] __sock_sendmsg+0x21c/0x270 [ 249.973287][T10577] ____sys_sendmsg+0x505/0x820 [ 249.978050][T10577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.983360][T10577] ? import_iovec+0x74/0xa0 [ 249.987888][T10577] ___sys_sendmsg+0x21f/0x2a0 [ 249.992572][T10577] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.997781][T10577] ? futex_wait+0x285/0x360 [ 250.002296][T10577] ? __fget_files+0x2a/0x420 [ 250.006911][T10577] ? __fget_files+0x3a0/0x420 [ 250.011611][T10577] __x64_sys_sendmsg+0x19b/0x260 [ 250.016555][T10577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.022014][T10577] ? rcu_is_watching+0x15/0xb0 [ 250.026788][T10577] do_syscall_64+0xec/0xf80 [ 250.031290][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.037350][T10577] ? trace_irq_disable+0x37/0x100 [ 250.042378][T10577] ? clear_bhb_loop+0x60/0xb0 [ 250.047142][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.053025][T10577] RIP: 0033:0x7fe3ce18f749 [ 250.057440][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.077066][T10577] RSP: 002b:00007fe3cefc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.085492][T10577] RAX: ffffffffffffffda RBX: 00007fe3ce3e5fa0 RCX: 00007fe3ce18f749 [ 250.093559][T10577] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 250.101530][T10577] RBP: 00007fe3ce213f91 R08: 0000000000000000 R09: 0000000000000000 [ 250.109500][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.117519][T10577] R13: 00007fe3ce3e6038 R14: 00007fe3ce3e5fa0 R15: 00007fe3ce50fa28 [ 250.125517][T10577] [ 250.128957][T10577] Kernel Offset: disabled [ 250.133272][T10577] Rebooting in 86400 seconds..